Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9dzKD0DuBlBHbt0gziUMoKNN4DE.roa
File: 9dzKD0DuBlBHbt0gziUMoKNN4DE.roa (raw, json)
Hash identifier: zF4f8WSkThP+QsTGqQMKSUyNzV7AsKmEjmkr1zm8WoU=
Subject key identifier: F5:DC:CA:0F:40:EE:06:50:47:6E:DD:20:CE:25:0C:A0:A3:4D:E0:31
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 1163D37E
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9dzKD0DuBlBHbt0gziUMoKNN4DE.roa
Signing time: Sat 01 Jan 2022 05:57:07 +0000
ROA not before: Sat 01 Jan 2022 05:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 195.80.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291754878 (0x1163d37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 05:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5dcca0f40ee0650476edd20ce250ca0a34de031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:59:e2:be:ea:58:3c:4f:d3:be:e2:d7:97:
76:fe:2d:4c:f3:14:41:44:d8:72:e0:cc:f5:78:1a:
35:e0:2b:b2:ef:37:45:b1:9b:3f:77:c6:c1:09:72:
f8:3e:19:ed:2d:54:2a:11:42:21:d3:b9:e0:ca:a4:
2a:99:cc:8d:f7:99:18:c0:5e:b4:62:23:3a:13:38:
34:3c:be:87:92:b6:8b:e4:15:f2:b5:15:22:6a:ec:
1a:fb:b2:cd:3a:6c:cf:a4:5c:25:8d:fd:46:76:66:
9e:63:19:bc:11:65:72:93:05:81:5b:96:74:b5:85:
44:8f:d8:ff:dd:a2:86:81:31:53:a7:0d:58:c2:2c:
6f:07:e4:c2:0d:d2:93:bc:7c:77:06:eb:15:be:57:
e6:b6:93:49:86:dd:15:e4:9e:d1:c3:cb:8e:e0:05:
85:97:5a:d5:74:cb:f6:4a:81:85:21:cb:22:5c:f0:
98:0a:76:1d:88:1a:4b:1b:81:59:e3:5b:40:7d:60:
4b:5e:97:5a:e2:f3:67:b0:f0:06:fa:d8:98:82:94:
d2:65:73:2a:d0:da:3a:e3:53:8e:61:31:6d:80:b3:
98:a6:d2:e5:17:6c:4e:fe:1c:c4:6d:3b:cb:4a:0a:
c8:d3:59:c6:e4:49:a3:14:00:35:df:54:71:9c:23:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:CA:0F:40:EE:06:50:47:6E:DD:20:CE:25:0C:A0:A3:4D:E0:31
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9dzKD0DuBlBHbt0gziUMoKNN4DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bc:48:89:ba:12:99:79:a8:5e:29:f6:a4:19:7d:0a:eb:2a:
85:4e:a4:85:70:f6:34:97:1e:a3:a8:d1:95:a4:5d:d9:28:9a:
ff:5f:6b:e7:6d:77:db:85:5a:d7:ec:01:c4:ab:a2:f0:b1:e6:
5d:b9:ed:5e:66:4a:91:38:dc:70:0e:a5:35:60:d9:37:2c:67:
6e:ad:d4:a7:88:31:6d:97:d7:7d:60:1e:1b:5b:8b:06:32:66:
88:e5:35:6c:1e:0b:d5:ac:c5:47:7a:c9:97:5c:63:95:57:0a:
ce:7c:19:8c:2d:d6:53:13:5d:c0:d0:f8:d4:6e:80:70:0b:9c:
d4:14:7d:a3:08:d0:18:05:fa:a8:fd:fd:b8:0a:d7:78:a7:4f:
84:5a:9d:95:b2:cc:a5:63:45:9b:5b:1f:67:e3:e0:07:fa:ec:
1d:c0:ad:e4:79:4f:98:1e:5b:0c:24:40:f9:55:2c:85:96:60:
bc:16:db:90:25:08:a2:54:2c:6a:8f:a7:a8:fd:88:52:14:19:
8c:53:31:06:ed:1c:62:6d:3c:b8:93:f9:0b:71:f0:d5:b3:a7:
f8:5c:7d:65:e7:63:b4:26:45:1b:a1:62:c2:f9:57:fa:8b:11:
b6:eb:6d:a2:c7:e2:76:af:54:1d:a8:88:8c:1f:cc:c2:42:3f:
95:e2:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org